@kybernesis/kyberagent-extension-sdk 0.1.0-alpha

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/testing/in-memory-host.ts","../../src/testing/conformance.ts","../../src/testing/conformance-subjects.ts"],"sourcesContent":["import type { KernelPermissionId, SeamResponse } from '@kyberagent/extension-contracts';\nimport type { BrainHit, BrainReadPort, BrainStatsView, ExtensionHostPort } from './host-port.js';\nimport {\n  gatedHostPort,\n  type HostCommandPort,\n  type HostContextPort,\n  type HostPort,\n  type SeamCallContext,\n} from '../seam-ports.js';\n\nexport type InMemoryAgentBrain = {\n  entities?: { id: string; title: string }[];\n  notes?: string[];\n};\n\n/**\n * A real-but-lightweight brain read provider backed by an in-memory seed — the\n * \"Fake\" category (xUnit), named by backing strategy to sit beside the real\n * Remote/local `BrainProvider`. Deterministic and daemon-free: a unit test can\n * exercise a brain-reading extension without SQLite, Cortex, or a running daemon.\n */\nexport class InMemoryBrainProvider implements BrainReadPort {\n  constructor(private readonly seed: InMemoryAgentBrain = {}) {}\n\n  async stats(): Promise<BrainStatsView> {\n    return { entities: this.seed.entities?.length ?? 0, notes: this.seed.notes?.length ?? 0 };\n  }\n\n  async query(text: string, opts?: { limit?: number }): Promise<BrainHit[]> {\n    const needle = text.trim().toLowerCase();\n    const hits = (this.seed.entities ?? [])\n      .filter((entity) => entity.title.toLowerCase().includes(needle))\n      .map((entity, index) => ({ id: entity.id, title: entity.title, score: Number((1 - index * 0.1).toFixed(2)) }));\n    return typeof opts?.limit === 'number' ? hits.slice(0, opts.limit) : hits;\n  }\n}\n\n/**\n * In-memory implementation of the host port: the test harness plays the host's\n * injector role and hands each agent its own InMemoryBrainProvider (brain is\n * agent-keyed). Seed per agent; an unseeded agent gets an empty brain.\n */\nexport class InMemoryHost implements ExtensionHostPort {\n  private readonly brains = new Map<string, InMemoryBrainProvider>();\n\n  constructor(seed: Record<string, InMemoryAgentBrain> = {}) {\n    for (const [agentName, agentBrain] of Object.entries(seed)) {\n      this.brains.set(agentName, new InMemoryBrainProvider(agentBrain));\n    }\n  }\n\n  brain(agentName: string): InMemoryBrainProvider {\n    let provider = this.brains.get(agentName);\n    if (!provider) {\n      provider = new InMemoryBrainProvider();\n      this.brains.set(agentName, provider);\n    }\n    return provider;\n  }\n\n  /**\n   * Inject a gated, ctx-bound `HostPort` — the GROWN contract an extension actually\n   * consumes (red-team A1/A3; P5-PORTS-1 brought forward as conformance-prep). The\n   * runner builds the raw port from this host's in-memory state, binds the active\n   * agent from `ctx`, then wraps it in `gatedHostPort(grants)` — the SAME gate\n   * production uses (SDK-N3). This is what makes C9 (\"green against InMemoryHost\")\n   * a real conformance check instead of a vacuous one.\n   */\n  inject(ctx: SeamCallContext, grants: ReadonlySet<KernelPermissionId>): HostPort {\n    const raw: HostPort = {\n      ctx,\n      brain: this.brain(ctx.activeAgent),\n      context: makeInMemoryContextPort(ctx),\n      command: IN_MEMORY_COMMAND_PORT,\n      // events omitted (ext-owned; supplied by the extension, not the host) — docs/63 D6\n    };\n    return gatedHostPort(raw, grants);\n  }\n}\n\nfunction makeInMemoryContextPort(ctx: SeamCallContext): HostContextPort {\n  return { snapshot: async () => ({ activeAgent: ctx.activeAgent }) };\n}\n\nconst IN_MEMORY_COMMAND_PORT: HostCommandPort = {\n  describe: async () => [],\n  invoke: async (commandId, args): Promise<SeamResponse> => ({\n    ok: true,\n    data: { invoked: commandId, args: args ?? {} },\n  }),\n};\n","/**\n * The C1–C16 conformance suite — the Extension SDK spec, MECHANICALLY ENFORCED.\n *\n * This module is the Phase-4 deliverable of the SDK-coherence program (docs/61).\n * docs/65 §5 states the conformance requirements in prose; THIS file encodes them as\n * runnable checks an extension is run through against `InMemoryHost` (the DI test\n * host, ADR-3). The suite IS the spec: a requirement that isn't a check here isn't\n * enforced, and a check that no reference extension exercises is vacuous — so the\n * suite carries BOTH ≥2 distinct conformant reference extensions (must pass) AND a\n * negative fixture per check (must be REJECTED). The Phase-3 red-team killed the old\n * harness for being green over only-good inputs; the negatives are the fix.\n *\n * FREEZE (ADR-6): this is conformance-prep, freeze-EXEMPT, and lives entirely under\n * `packages/extension-sdk/src/testing/`. It touches no production runtime (daemon,\n * desktop). It DEFINES what Phase-5 production code must satisfy; it does not write it.\n *\n * RED BY DESIGN (docs/61 `phase4_will_be_red_until_phase5`): C10/C11/C12, C14/C15,\n * the grant-store and the agent-registry mint are HOST/BUILDER-side and have no\n * production impl yet. They are modelled as `phase5` checks behind DI seams\n * (`ConformanceWiring`): with the seam absent (today) they report a RED \"pending\"\n * row but do NOT fail the process — so the suite stays green for the other devs while\n * being honestly red-in-meaning. When Phase 5 wires a seam in (from a daemon-side\n * test importing this suite), the check runs for real and a regression fails loudly.\n * `CONFORMANCE_STRICT=1` makes pending rows fail the process too (CI gate once ready).\n */\n\nimport type {\n  KernelPermissionId,\n  SeamDescribePayload,\n  SeamInvokePayload,\n  SeamQueryPayload,\n  SeamResponse,\n} from '@kyberagent/extension-contracts';\nimport { parseContributionId } from '@kyberagent/extension-contracts';\nimport {\n  defineDataEndpoint,\n  emitExtensionContributionSet,\n  requiresHostCapabilities as sdkRequiresHostCapabilities,\n  validateDefinitionCrossRefs as sdkValidateDefinitionCrossRefs,\n  type ExtensionDefinition,\n} from '../index.js';\nimport {\n  makeAgentId,\n  makeSeamCallContext,\n  SeamPermissionDenied,\n  type AgentId,\n  type AnsweringPort,\n  type HostPort,\n  type PortInjectionResult,\n  type SeamCallContext,\n  type VerifiedPrincipal,\n} from '../seam-ports.js';\nimport { InMemoryHost } from './in-memory-host.js';\nimport { clearRawContributionIdUsages, rawContributionIdUsages } from '../contribution-id-deprecation.js';\n\n// ─── The subject under test ────────────────────────────────────────────────────\n\n/**\n * One extension, as the conformance suite needs to see it: its DECLARED shape (the\n * definition — permissions, contributions) AND its RUNTIME behaviour (answering ports\n * wired to an injected host). A conformant extension passes every `enforced` check;\n * a negative fixture is tagged with the one check it is built to violate.\n */\nexport interface ConformanceSubject {\n  readonly name: string;\n  /** Host-attested principal — what the host would stamp (never read from a payload). */\n  readonly principal: VerifiedPrincipal;\n  /** The declared definition (built via the define* builders). */\n  readonly definition: ExtensionDefinition;\n  /**\n   * Wire the answering EXT ports to an INJECTED (already-gated) host port, keyed by\n   * contributionId. This is the runtime moment: the host injects the port at\n   * activation and the contributions close over it. Rendering kinds (surface,\n   * settingsPanel) contribute NO answering port (C8).\n   */\n  activate(host: HostPort): ReadonlyMap<string, AnsweringPort>;\n  /**\n   * The identity the extension would act under, given its call context and a\n   * (possibly forged) extensionId arriving in a payload. Conformant ⇒ `ctx.principal.id`,\n   * NEVER the payload value (C4). A harness probe because \"where did identity come\n   * from\" is otherwise invisible from the outside.\n   */\n  identityProbe(ctx: SeamCallContext, forgedExtensionId: string): string;\n}\n\n/** A negative fixture: a subject built to FAIL exactly one check, proving it bites. */\nexport interface NegativeFixture {\n  readonly violates: string; // a CheckId\n  readonly subject: ConformanceSubject;\n}\n\n// ─── Phase-5 DI seams — the production contracts the suite tests AGAINST ─────────\n\nexport type SeamRouteOp = 'query' | 'describe' | 'invoke' | 'subscribe' | 'drain';\n\n/**\n * The Phase-5 PRODUCTION seam runner contract (the daemon host-side path). The suite\n * tests against this interface; the daemon supplies the impl in Phase 5 (DI, ADR-3)\n * by importing this suite from a daemon-side test. Until then it is absent and\n * C10/C11/C12 + grant-store report `pending`. Encoding the contract here is what\n * makes \"the seam runner honours activation + gate on EVERY route\" a checkable claim\n * instead of a hope.\n */\nexport interface SeamRunner {\n  /** The activation authority's verdict for a principal in a given call context. */\n  activate(principalId: string, ctx: SeamCallContext): PortInjectionResult;\n  /**\n   * The ONE grant store: the grants for this principal — NOT a hardcoded startup list\n   * (DIV-2, displaces handlers.ts:542). The gate is fed from here.\n   */\n  grantsFor(principalId: string, ctx: SeamCallContext): ReadonlySet<KernelPermissionId>;\n  /**\n   * Route an op to a contribution. MUST consult `activate()` + the gate for EVERY op,\n   * INCLUDING the `drain` subscription side-door (C10 / HOST-N2): an inactive or\n   * ungranted principal gets a typed denial and the contribution is never reached.\n   */\n  route(\n    op: SeamRouteOp,\n    target: { readonly principalId: string; readonly contributionId: string },\n    payload: Record<string, unknown> | undefined,\n    ctx: SeamCallContext,\n  ): Promise<SeamResponse>;\n  /** How many independent activation authorities exist. C11 demands EXACTLY ONE. */\n  activationAuthorityCount(): number;\n}\n\n/**\n * The DI seams Phase-5 wires in to turn the `phase5` checks from RED→green. Every\n * field is optional; an absent field ⇒ its dependent checks report `pending`.\n */\nexport interface ConformanceWiring {\n  /** Production seam runner ⇒ enables C10, C11, C12, grant-store. */\n  readonly runner?: SeamRunner;\n  /**\n   * Override for the builder cross-validator (C15). Defaults to the shipped SDK\n   * `validateDefinitionCrossRefs` (Phase-5 slice 1 landed it in-package), so C15 is\n   * enforced without wiring; a daemon may substitute its own. Returns declaration\n   * errors for a definition (empty ⇒ valid).\n   */\n  readonly validateDefinitionCrossRefs?: (definition: ExtensionDefinition) => readonly string[];\n  /**\n   * Production registry-aware agent mint (HOST-N3) ⇒ enables agentId-registry. Must\n   * REJECT a name absent from `registry`, unlike today's `makeAgentId` (blank-only).\n   */\n  readonly mintAttestedAgent?: (attestedName: string, registry: ReadonlySet<string>) => AgentId;\n  /** The agent registry the mint validates against (and the suite seeds brains for). */\n  readonly agentRegistry?: ReadonlySet<string>;\n}\n\n// ─── Verdict + check model ───────────────────────────────────────────────────────\n\nexport type CheckStatus = 'pass' | 'fail' | 'pending';\nexport type Disposition = 'enforced' | 'phase5';\n\nexport interface CheckVerdict {\n  readonly id: string;\n  readonly title: string;\n  readonly disposition: Disposition;\n  readonly status: CheckStatus;\n  readonly notes: readonly string[];\n}\n\ninterface CheckContext {\n  readonly subjects: readonly ConformanceSubject[];\n  readonly negatives: readonly ConformanceSubject[]; // those tagged to THIS check\n  readonly wiring: ConformanceWiring;\n  readonly host: InMemoryHost;\n}\n\ninterface CheckOutcome {\n  readonly status: CheckStatus;\n  readonly notes: readonly string[];\n}\n\ninterface Check {\n  readonly id: string;\n  readonly title: string;\n  readonly disposition: Disposition;\n  /** Visual-checklist framing (docs/61 Principle 6): how to look, and what's broken. */\n  readonly open: string;\n  readonly brokenIf: string;\n  run(cc: CheckContext): Promise<CheckOutcome> | CheckOutcome;\n}\n\n// ─── Harness primitives ──────────────────────────────────────────────────────────\n\nconst ALL_GRANTS: ReadonlySet<KernelPermissionId> = new Set<KernelPermissionId>([\n  'brain.read',\n  'host.context.read',\n  'host.command.invoke',\n]);\nconst NO_GRANTS: ReadonlySet<KernelPermissionId> = new Set<KernelPermissionId>();\n\n/** The host-port getters that are gated, and the permission each one costs. */\nconst GETTER_PERMISSION = {\n  brain: 'brain.read',\n  context: 'host.context.read',\n  command: 'host.command.invoke',\n} as const satisfies Record<string, KernelPermissionId>;\n\nfunction ctxFor(principal: VerifiedPrincipal, agent: string): SeamCallContext {\n  return makeSeamCallContext({ principal, activeAgent: makeAgentId(agent), requestedAtMs: 0 });\n}\n\n/** Wrap a host port so each gated-getter access is recorded — lets a check observe\n *  the permissions a run ACTUALLY uses (C3) and that host access goes THROUGH the\n *  injected port (C1). Delegates to the underlying (gated) getter, which still throws\n *  when ungranted. */\nfunction instrument(port: HostPort): { port: HostPort; touched: Set<KernelPermissionId> } {\n  const touched = new Set<KernelPermissionId>();\n  const wrapped: HostPort = {\n    ctx: port.ctx,\n    get brain() {\n      touched.add(GETTER_PERMISSION.brain);\n      return port.brain;\n    },\n    get context() {\n      touched.add(GETTER_PERMISSION.context);\n      return port.context;\n    },\n    get command() {\n      touched.add(GETTER_PERMISSION.command);\n      return port.command;\n    },\n    events: port.events,\n  };\n  return { port: wrapped, touched };\n}\n\nconst EXERCISE_QUERY: SeamQueryPayload = { filter: { q: '' }, limit: 5 };\nconst EXERCISE_DESCRIBE: SeamDescribePayload = {};\nconst EXERCISE_INVOKE: SeamInvokePayload = { commandId: 'conformance.noop', args: { q: '' } };\n\ninterface ExercisedPort {\n  rows?: ReadonlyArray<Record<string, unknown>>;\n  response?: SeamResponse;\n}\n\n/** Drive whichever method(s) an answering port implements with minimal valid payloads.\n *  Used both to collect usage and to probe behaviour. Returns whatever the port\n *  produced; rethrows so a caller can observe denials. */\nasync function exercise(port: AnsweringPort, ctx: SeamCallContext): Promise<ExercisedPort> {\n  const out: { rows?: ReadonlyArray<Record<string, unknown>>; response?: SeamResponse } = {};\n  const p = port as Partial<{\n    query(payload: SeamQueryPayload, ctx: SeamCallContext): Promise<ReadonlyArray<Record<string, unknown>>>;\n    describe(payload: SeamDescribePayload, ctx: SeamCallContext): Promise<unknown>;\n    invoke(payload: SeamInvokePayload, ctx: SeamCallContext): Promise<SeamResponse>;\n  }>;\n  if (typeof p.query === 'function') out.rows = await p.query(EXERCISE_QUERY, ctx);\n  if (typeof p.describe === 'function') await p.describe(EXERCISE_DESCRIBE, ctx);\n  if (typeof p.invoke === 'function') out.response = await p.invoke(EXERCISE_INVOKE, ctx);\n  return out;\n}\n\n/** The permissions a subject actually uses: inject FULL grants, instrument, exercise\n *  every answering port, collect the touched getters. */\nasync function collectUsage(subject: ConformanceSubject, host: InMemoryHost): Promise<Set<KernelPermissionId>> {\n  const ctx = ctxFor(subject.principal, 'k-brain');\n  const { port, touched } = instrument(host.inject(ctx, ALL_GRANTS));\n  const contributions = subject.activate(port);\n  for (const ans of contributions.values()) {\n    try {\n      await exercise(ans, ctx);\n    } catch {\n      // a throw still means the getter was touched (recorded pre-throw); ignore.\n    }\n  }\n  return touched;\n}\n\nfunction declaredHostPermissions(definition: ExtensionDefinition): Set<KernelPermissionId> {\n  const gated = new Set<KernelPermissionId>(Object.values(GETTER_PERMISSION));\n  return new Set((definition.permissions ?? []).filter((p) => gated.has(p)));\n}\n\nfunction firstDataEndpoint(contributions: ReadonlyMap<string, AnsweringPort>): AnsweringPort | undefined {\n  for (const [id, port] of contributions) {\n    if (id.startsWith('data.')) return port;\n  }\n  return undefined;\n}\n\nfunction setEq(a: ReadonlySet<string>, b: ReadonlySet<string>): boolean {\n  if (a.size !== b.size) return false;\n  for (const v of a) if (!b.has(v)) return false;\n  return true;\n}\n\n// ─── The checks ──────────────────────────────────────────────────────────────────\n// Each runs the conformant subjects (which MUST pass) and its negatives (which MUST\n// be rejected). A check fails if a conformant subject is rejected OR a negative slips\n// through — the second is the anti-vacuity guard the red-team demanded.\n\nconst CHECKS: readonly Check[] = [\n  {\n    id: 'C1',\n    title: 'injection only — host reached only through the injected port',\n    disposition: 'enforced',\n    open: 'Inject a host port with ZERO grants and exercise the extension.',\n    brokenIf: 'host-derived data comes back without going through the gated port (a reach for a global).',\n    async run({ subjects, negatives, host }) {\n      const notes: string[] = [];\n      const check = async (s: ConformanceSubject): Promise<{ obtainedUngated: boolean }> => {\n        const ctx = ctxFor(s.principal, 'k-brain');\n        const port = host.inject(ctx, NO_GRANTS); // gated: every host getter throws\n        const contributions = s.activate(port);\n        let obtainedUngated = false;\n        for (const ans of contributions.values()) {\n          try {\n            const out = await exercise(ans, ctx);\n            // Reached host data with no grants ⇒ it bypassed the gated port.\n            const rowsBrainy = (out.rows ?? []).some((r) => 'title' in r || 'top' in r || 'noteCount' in r);\n            const respBrainy =\n              out.response?.ok === true &&\n              typeof out.response.data === 'object' &&\n              out.response.data !== null &&\n              'activeAgent' in (out.response.data as object);\n            if (rowsBrainy || respBrainy) obtainedUngated = true;\n          } catch (err) {\n            if (!(err instanceof SeamPermissionDenied)) throw err; // a real bug, not a gate denial\n          }\n        }\n        return { obtainedUngated };\n      };\n      // host-declaring subjects must NOT yield host data under zero grants.\n      for (const s of subjects) {\n        if (declaredHostPermissions(s.definition).size === 0) continue;\n        const { obtainedUngated } = await check(s);\n        if (obtainedUngated) notes.push(`${s.name}: returned host data with no grants — reached past the injected port`);\n      }\n      for (const s of negatives) {\n        const { obtainedUngated } = await check(s);\n        if (!obtainedUngated) notes.push(`negative ${s.name}: expected a global-reach violation, none detected`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C2',\n    title: 'context honoured — agent-scoped reads use ctx.activeAgent',\n    disposition: 'enforced',\n    open: 'Run the data endpoint under two different active agents (seeded differently).',\n    brokenIf: 'the result is identical across agents (a re-derived/default agent, not ctx.activeAgent).',\n    async run({ subjects, negatives, host }) {\n      const notes: string[] = [];\n      const varies = async (s: ConformanceSubject): Promise<boolean | undefined> => {\n        const a = ctxFor(s.principal, 'k-brain');\n        const b = ctxFor(s.principal, 'arcana');\n        const portA = firstDataEndpoint(s.activate(host.inject(a, ALL_GRANTS)));\n        const portB = firstDataEndpoint(s.activate(host.inject(b, ALL_GRANTS)));\n        if (!portA || !portB) return undefined; // no agent-scoped read to judge\n        const ra = JSON.stringify((await exercise(portA, a)).rows ?? []);\n        const rb = JSON.stringify((await exercise(portB, b)).rows ?? []);\n        return ra !== rb;\n      };\n      for (const s of subjects) {\n        const v = await varies(s);\n        if (v === false) notes.push(`${s.name}: data endpoint returned identical rows across agents — ignores ctx.activeAgent`);\n      }\n      for (const s of negatives) {\n        const v = await varies(s);\n        if (v !== false) notes.push(`negative ${s.name}: expected agent-blind output, but it varied (or had no data endpoint)`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C3',\n    title: 'declarations match usage — declared permissions ⇔ host-port calls',\n    disposition: 'enforced',\n    open: 'Diff the declared host permissions against the getters the run actually touches.',\n    brokenIf: 'a declared permission is never used, or a used getter was never declared.',\n    async run({ subjects, negatives, host }) {\n      const notes: string[] = [];\n      const mismatch = async (s: ConformanceSubject): Promise<string | null> => {\n        const declared = declaredHostPermissions(s.definition);\n        const used = await collectUsage(s, host);\n        const unusedDecl = [...declared].filter((p) => !used.has(p));\n        const undeclUsed = [...used].filter((p) => !declared.has(p));\n        if (unusedDecl.length || undeclUsed.length) {\n          return `declared-not-used=[${unusedDecl.join(',')}] used-not-declared=[${undeclUsed.join(',')}]`;\n        }\n        return null;\n      };\n      for (const s of subjects) {\n        const m = await mismatch(s);\n        if (m) notes.push(`${s.name}: ${m}`);\n      }\n      for (const s of negatives) {\n        const m = await mismatch(s);\n        if (!m) notes.push(`negative ${s.name}: expected a declaration/usage mismatch, found none`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C4',\n    title: 'identity from context — never read extensionId from a payload',\n    disposition: 'enforced',\n    open: 'Probe identity with a FORGED extensionId in the payload; compare to ctx.principal.id.',\n    brokenIf: 'the extension reports the forged payload id instead of ctx.principal.id.',\n    run({ subjects, negatives }) {\n      const notes: string[] = [];\n      const FORGED = 'plugin.forged-impostor';\n      for (const s of subjects) {\n        const ctx = ctxFor(s.principal, 'k-brain');\n        const reported = s.identityProbe(ctx, FORGED);\n        if (reported !== ctx.principal.id) notes.push(`${s.name}: reported identity \"${reported}\" ≠ ctx.principal.id \"${ctx.principal.id}\"`);\n      }\n      for (const s of negatives) {\n        const ctx = ctxFor(s.principal, 'k-brain');\n        const reported = s.identityProbe(ctx, FORGED);\n        if (reported === ctx.principal.id) notes.push(`negative ${s.name}: expected it to trust the forged payload id, but it used ctx`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C5',\n    title: 'gated access fails typed — missing grant ⇒ seam.permission_denied',\n    disposition: 'enforced',\n    open: 'Access each declared host getter with the grant withheld.',\n    brokenIf: 'it returns/throws anything other than a typed SeamPermissionDenied.',\n    run({ subjects, host }) {\n      const notes: string[] = [];\n      for (const s of subjects) {\n        const ctx = ctxFor(s.principal, 'k-brain');\n        for (const perm of declaredHostPermissions(s.definition)) {\n          const getter = (Object.keys(GETTER_PERMISSION) as (keyof typeof GETTER_PERMISSION)[]).find(\n            (k) => GETTER_PERMISSION[k] === perm,\n          );\n          if (!getter) continue;\n          const port = host.inject(ctx, NO_GRANTS);\n          try {\n            void port[getter];\n            notes.push(`${s.name}: accessing .${getter} without a grant did NOT throw`);\n          } catch (err) {\n            if (!(err instanceof SeamPermissionDenied) || err.permission !== perm) {\n              notes.push(`${s.name}: .${getter} threw ${String(err)} instead of SeamPermissionDenied(${perm})`);\n            }\n          }\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C6',\n    title: 'typed blocked cause — a withheld port carries a BlockedReason discriminant',\n    disposition: 'enforced',\n    open: 'Model an inactive activation result and read its blocked cause.',\n    brokenIf: \"the cause is a bare 'blocked' string rather than a typed discriminant.\",\n    run() {\n      // The BlockedReason union (seam-ports.ts) is the structural fix for DIV-3; here\n      // we assert a withheld result is expressed through it, never a bare 'blocked'.\n      const notes: string[] = [];\n      const withheld: PortInjectionResult[] = [\n        { ok: false, blocked: { cause: 'inactive', scope: 'agent' } },\n        { ok: false, blocked: { cause: 'missing-host-capability', missing: ['host.notifications'] } },\n        { ok: false, blocked: { cause: 'denied-permission', denied: ['brain.read'] } },\n        { ok: false, blocked: { cause: 'unmet-requirement', requirement: 'connector-auth' } },\n      ];\n      const validCauses = new Set(['inactive', 'missing-host-capability', 'denied-permission', 'unmet-requirement']);\n      for (const r of withheld) {\n        if (r.ok) {\n          notes.push('expected a withheld result');\n          continue;\n        }\n        const cause = (r.blocked as { cause?: unknown }).cause;\n        if (typeof cause !== 'string' || cause === 'blocked' || !validCauses.has(cause)) {\n          notes.push(`blocked cause \"${String(cause)}\" is not a typed discriminant`);\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C7',\n    title: 'typed contributionId — built from { ext, name? }, not a raw string',\n    disposition: 'enforced',\n    open: 'Build every contribution through the define* builders and watch the deprecation registry.',\n    brokenIf: 'a contributionId took the raw-string path (recorded by the deprecation bridge).',\n    run({ subjects, negatives }) {\n      const notes: string[] = [];\n      // The reference subjects build their definitions at module load; raw-string usage\n      // is recorded globally. Re-derive each subject's ids and confirm none is raw.\n      const raw = new Set(rawContributionIdUsages());\n      for (const s of subjects) {\n        for (const c of emitExtensionContributionSet(s.definition).contributions) {\n          if (raw.has(c.contributionId)) notes.push(`${s.name}: \"${c.contributionId}\" took the deprecated raw-string path`);\n          // also confirm it parses to an ext-owned key (typed shape)\n          try {\n            const key = parseContributionId(c.contributionId);\n            if (key.owner !== 'ext') notes.push(`${s.name}: \"${c.contributionId}\" is not an ext-owned id`);\n          } catch (err) {\n            notes.push(`${s.name}: \"${c.contributionId}\" is unparseable — ${String(err)}`);\n          }\n        }\n      }\n      for (const s of negatives) {\n        const ids = emitExtensionContributionSet(s.definition).contributions.map((c) => c.contributionId);\n        if (!ids.some((id) => raw.has(id))) notes.push(`negative ${s.name}: expected a raw-string contributionId, none recorded`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C8',\n    title: 'single-purpose kind — rendering kinds implement no answering port',\n    disposition: 'enforced',\n    open: 'Match each contribution kind against whether it provides an answering port.',\n    brokenIf: 'a surface/settingsPanel also answers ops, or an answering kind provides no port.',\n    run({ subjects, negatives, host }) {\n      const notes: string[] = [];\n      const RENDERING = new Set(['surface', 'settingsPanel']);\n      const ANSWERING = new Set(['dataEndpoint', 'composerCapability', 'contextualAction']);\n      const judge = (s: ConformanceSubject): string[] => {\n        const local: string[] = [];\n        const ctx = ctxFor(s.principal, 'k-brain');\n        const ports = s.activate(host.inject(ctx, ALL_GRANTS));\n        for (const c of emitExtensionContributionSet(s.definition).contributions) {\n          const hasPort = ports.has(c.contributionId);\n          if (RENDERING.has(c.kind) && hasPort) local.push(`${c.contributionId} (${c.kind}) provides an answering port`);\n          if (ANSWERING.has(c.kind) && !hasPort) local.push(`${c.contributionId} (${c.kind}) provides NO answering port`);\n        }\n        return local;\n      };\n      for (const s of subjects) for (const n of judge(s)) notes.push(`${s.name}: ${n}`);\n      for (const s of negatives) {\n        if (judge(s).length === 0) notes.push(`negative ${s.name}: expected a kind/port mismatch, found none`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C9',\n    title: 'green against InMemoryHost — the full happy path runs clean',\n    disposition: 'enforced',\n    open: 'Activate with correct grants and call every answering port end-to-end.',\n    brokenIf: 'any conformant subject throws or returns a malformed response on the happy path.',\n    async run({ subjects, host }) {\n      const notes: string[] = [];\n      for (const s of subjects) {\n        const ctx = ctxFor(s.principal, 'k-brain');\n        const grants = new Set<KernelPermissionId>(s.definition.permissions ?? []);\n        try {\n          const ports = s.activate(host.inject(ctx, grants));\n          for (const [id, ans] of ports) {\n            const out = await exercise(ans, ctx);\n            if (out.response && out.response.ok !== true && out.response.ok !== false) {\n              notes.push(`${s.name}/${id}: response is not a typed SeamResponse`);\n            }\n          }\n        } catch (err) {\n          notes.push(`${s.name}: happy path threw ${String(err)}`);\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C10',\n    title: 'every host route honours activation + gate (incl. the drain side-door)',\n    disposition: 'phase5',\n    open: 'Drive each op — including subscription `drain` — through the production SeamRunner for an INACTIVE principal.',\n    brokenIf: 'any route (especially drain) reaches the contribution without a typed denial.',\n    async run({ subjects, wiring }) {\n      const { runner } = wiring;\n      if (!runner) return pending('no production SeamRunner wired (Phase-5 daemon code)');\n      const notes: string[] = [];\n      const ops: SeamRouteOp[] = ['query', 'describe', 'invoke', 'subscribe', 'drain'];\n      for (const s of subjects) {\n        const ctx = ctxFor(s.principal, 'inactive-agent');\n        const verdict = runner.activate(s.principal.id, ctx);\n        if (verdict.ok) continue; // only meaningful when inactive\n        for (const op of ops) {\n          const res = await runner.route(op, { principalId: s.principal.id, contributionId: 'data.x' }, undefined, ctx);\n          if (res.ok !== false) notes.push(`${s.name}: route op=\"${op}\" did NOT yield a typed denial for an inactive principal`);\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C11',\n    title: 'exactly one activation authority',\n    disposition: 'phase5',\n    open: 'Ask the SeamRunner how many independent activation sets exist.',\n    brokenIf: 'the count is not exactly 1 (a parallel set like bridge-sessions inactiveExtensions).',\n    run({ wiring }) {\n      const { runner } = wiring;\n      if (!runner) return pending('no production SeamRunner wired (Phase-5 daemon code)');\n      const n = runner.activationAuthorityCount();\n      return n === 1\n        ? { status: 'pass', notes: [] }\n        : { status: 'fail', notes: [`activationAuthorityCount()=${n}, expected exactly 1`] };\n    },\n  },\n  {\n    id: 'C12',\n    title: 'scope is honoured — per-agent deactivation does not leak to other agents',\n    disposition: 'phase5',\n    open: 'Deactivate a principal for one agent and check another agent is still active.',\n    brokenIf: \"the deactivation blocks other agents, or its scope isn't 'agent'.\",\n    run({ subjects, wiring }) {\n      const { runner } = wiring;\n      if (!runner) return pending('no production SeamRunner wired (Phase-5 daemon code)');\n      const notes: string[] = [];\n      for (const s of subjects) {\n        const a = runner.activate(s.principal.id, ctxFor(s.principal, 'agent-a'));\n        const b = runner.activate(s.principal.id, ctxFor(s.principal, 'agent-b'));\n        if (!a.ok) {\n          if (a.blocked.cause === 'inactive' && a.blocked.scope !== 'agent') {\n            notes.push(`${s.name}: agent-a deactivation scope=\"${a.blocked.scope}\", expected 'agent'`);\n          }\n          if (!b.ok) notes.push(`${s.name}: agent-a deactivation also blocked agent-b (scope leaked)`);\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C13',\n    title: 'builders validate ids — unknown permission/capability rejected loudly',\n    disposition: 'enforced',\n    open: 'Pass a bogus permission/capability id to the requires* builders.',\n    brokenIf: 'an unknown id passes through silently instead of throwing.',\n    async run() {\n      const notes: string[] = [];\n      const { requiresKernelPermissions, requiresHostCapabilities } = await import('../index.js');\n      const expectThrow = (fn: () => unknown, what: string) => {\n        try {\n          fn();\n          notes.push(`${what} did not reject an unknown id`);\n        } catch {\n          /* expected */\n        }\n      };\n      expectThrow(() => requiresKernelPermissions('not.a.permission' as KernelPermissionId), 'requiresKernelPermissions');\n      expectThrow(() => requiresHostCapabilities('host.not-real' as never), 'requiresHostCapabilities');\n      // known ids must still pass\n      try {\n        requiresKernelPermissions('brain.read');\n      } catch (err) {\n        notes.push(`requiresKernelPermissions rejected a KNOWN id: ${String(err)}`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C14',\n    title: 'one canonical \"none\" form for host capabilities',\n    disposition: 'enforced',\n    open: 'Build the same contribution three ways (omitted / [] / empty requires*) and compare the emitted capabilities.',\n    brokenIf: 'the three \"no host capability\" forms do not normalize to one canonical value.',\n    run() {\n      const omitted = defineDataEndpoint({ ext: 'c14-probe', name: 'omitted', displayName: 'omitted' });\n      const empty = defineDataEndpoint({ ext: 'c14-probe', name: 'empty', displayName: 'empty', requiredHostCapabilities: [] });\n      const call = defineDataEndpoint({\n        ext: 'c14-probe',\n        name: 'call',\n        displayName: 'call',\n        requiredHostCapabilities: sdkRequiresHostCapabilities(),\n      });\n      const forms = [omitted, empty, call].map((c) => JSON.stringify(c.requiredHostCapabilities ?? null));\n      const notes = new Set(forms).size === 1 ? [] : [`the three \"none\" forms normalize differently: ${forms.join(' | ')}`];\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C15',\n    title: 'contribution ⊆ extension declarations (kernel permissions)',\n    disposition: 'enforced',\n    open: 'Validate the references (must pass) and a definition whose contribution requires an undeclared kernel permission (must be flagged). Host capabilities are contribution-scoped (DIV-8), not subset-checked.',\n    brokenIf: 'a conformant reference is flagged, or the over-reaching contribution is NOT flagged.',\n    run({ subjects, negatives, wiring }) {\n      const validate = wiring.validateDefinitionCrossRefs ?? sdkValidateDefinitionCrossRefs;\n      const notes: string[] = [];\n      for (const s of subjects) {\n        const errors = validate(s.definition);\n        if (errors.length) notes.push(`${s.name}: conformant extension flagged — ${errors.join('; ')}`);\n      }\n      for (const s of negatives) {\n        const errors = validate(s.definition);\n        if (errors.length === 0) notes.push(`negative ${s.name}: over-reaching contribution was NOT flagged`);\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'C16',\n    title: 'one gate model per permission domain',\n    disposition: 'enforced',\n    open: 'Across subjects gating composer.capabilities.invoke, compare WHERE the permission is declared.',\n    brokenIf: 'the same domain is gated at the extension level by some and the contribution level by others.',\n    run({ subjects, negatives }) {\n      const DOMAIN: KernelPermissionId = 'composer.capabilities.invoke';\n      const styleOf = (s: ConformanceSubject): 'extension' | 'contribution' | 'none' => {\n        if ((s.definition.permissions ?? []).includes(DOMAIN)) return 'extension';\n        const usesAtContribution = emitExtensionContributionSet(s.definition).contributions.some((c) =>\n          (c.requiredKernelPermissions ?? []).includes(DOMAIN),\n        );\n        return usesAtContribution ? 'contribution' : 'none';\n      };\n      const styles = new Set(subjects.map(styleOf).filter((x) => x !== 'none'));\n      const notes: string[] = [];\n      if (styles.size > 1) notes.push(`conformant subjects gate ${DOMAIN} inconsistently: ${[...styles].join(' + ')}`);\n      // the negative pair is built to diverge — together with a conformant subject the\n      // domain must show >1 style.\n      if (negatives.length) {\n        const allStyles = new Set([...subjects, ...negatives].map(styleOf).filter((x) => x !== 'none'));\n        if (allStyles.size <= 1) notes.push('negative pair: expected inconsistent gate models across the domain, found uniform');\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'grant-store',\n    title: 'grants come from the activation authority, not a hardcoded list',\n    disposition: 'phase5',\n    open: 'Read a principal\\'s grants from the SeamRunner grant store.',\n    brokenIf: 'grants are sourced from a startup constant rather than the per-principal store (DIV-2).',\n    run({ subjects, wiring }) {\n      const { runner } = wiring;\n      if (!runner) return pending('no production SeamRunner / grant store wired (Phase-5 daemon code)');\n      const notes: string[] = [];\n      for (const s of subjects) {\n        const grants = runner.grantsFor(s.principal.id, ctxFor(s.principal, 'k-brain'));\n        // grants must be a per-principal set the gate can consume; presence is the contract.\n        if (!(grants instanceof Set) && typeof (grants as ReadonlySet<KernelPermissionId>).has !== 'function') {\n          notes.push(`${s.name}: grantsFor did not return a permission set`);\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n  {\n    id: 'agentId-registry',\n    title: 'agent id minted only for a registered, host-attested name',\n    disposition: 'phase5',\n    open: 'Mint an AgentId for a name that is NOT in the agent registry.',\n    brokenIf: 'minting succeeds for an unregistered name (today makeAgentId rejects only blanks — HOST-N3).',\n    run({ wiring }) {\n      const { mintAttestedAgent, agentRegistry } = wiring;\n      if (!mintAttestedAgent || !agentRegistry) return pending('no registry-aware mint wired (Phase-5 host code, HOST-N3)');\n      const notes: string[] = [];\n      try {\n        mintAttestedAgent('definitely-not-a-registered-agent', agentRegistry);\n        notes.push('minted an AgentId for an UNREGISTERED name — registry validation missing');\n      } catch {\n        /* expected: rejected */\n      }\n      // a registered name must still mint\n      const known = [...agentRegistry][0];\n      if (known) {\n        try {\n          mintAttestedAgent(known, agentRegistry);\n        } catch (err) {\n          notes.push(`rejected a REGISTERED name \"${known}\": ${String(err)}`);\n        }\n      }\n      return { status: notes.length ? 'fail' : 'pass', notes };\n    },\n  },\n];\n\nfunction pending(reason: string): CheckOutcome {\n  return { status: 'pending', notes: [reason] };\n}\n\n// ─── Runner + report ───────────────────────────────────────────────────────────\n\nexport interface ConformanceInput {\n  readonly subjects: readonly ConformanceSubject[];\n  readonly negatives: readonly NegativeFixture[];\n  readonly wiring?: ConformanceWiring;\n  /** Seed for the InMemoryHost — two agents seeded DIFFERENTLY so C2 can see variance. */\n  readonly host?: InMemoryHost;\n}\n\nexport interface ConformanceReport {\n  readonly verdicts: readonly CheckVerdict[];\n  readonly enforcedFailures: number;\n  readonly phase5Pending: number;\n  readonly phase5Regressions: number;\n  readonly negativeGaps: number;\n  readonly ok: boolean; // process-level: enforced all green AND no phase5 regression\n}\n\nconst DEFAULT_HOST = (): InMemoryHost =>\n  new InMemoryHost({\n    'k-brain': {\n      entities: [\n        { id: '1', title: 'Acme Corp' },\n        { id: '2', title: 'Acme Holdings' },\n      ],\n      notes: ['kb-note-1', 'kb-note-2', 'kb-note-3'],\n    },\n    arcana: {\n      entities: [{ id: '9', title: 'Arcana Archive' }],\n      notes: ['arcana-only'],\n    },\n  });\n\nexport async function runConformance(input: ConformanceInput): Promise<ConformanceReport> {\n  const host = input.host ?? DEFAULT_HOST();\n  const wiring = input.wiring ?? {};\n  const verdicts: CheckVerdict[] = [];\n\n  for (const check of CHECKS) {\n    const negatives = input.negatives.filter((n) => n.violates === check.id).map((n) => n.subject);\n    let outcome: CheckOutcome;\n    try {\n      outcome = await check.run({ subjects: input.subjects, negatives, wiring, host });\n    } catch (err) {\n      outcome = { status: 'fail', notes: [`check threw: ${String(err)}`] };\n    }\n    verdicts.push({\n      id: check.id,\n      title: check.title,\n      disposition: check.disposition,\n      status: outcome.status,\n      notes: outcome.notes,\n    });\n  }\n\n  const enforcedFailures = verdicts.filter((v) => v.disposition === 'enforced' && v.status === 'fail').length;\n  const phase5Pending = verdicts.filter((v) => v.disposition === 'phase5' && v.status === 'pending').length;\n  const phase5Regressions = verdicts.filter((v) => v.disposition === 'phase5' && v.status === 'fail').length;\n  // a phase5 check that PASSES while the suite still treats it pending is a signal to\n  // promote — but with the DI-seam model a pass simply means Phase-5 wired it in, which\n  // is the goal, so it is NOT a failure. Regressions (fail) are.\n  const negativeGaps = 0; // negative slips are already folded into the per-check fail notes\n\n  return {\n    verdicts,\n    enforcedFailures,\n    phase5Pending,\n    phase5Regressions,\n    negativeGaps,\n    ok: enforcedFailures === 0 && phase5Regressions === 0,\n  };\n}\n\nconst ICON: Record<CheckStatus, string> = { pass: '🟢', fail: '🔴', pending: '🟡' };\n\n/** Render the visual conformance checklist (docs/61 Principle 6). */\nexport function renderReport(report: ConformanceReport, opts?: { strict?: boolean }): string {\n  const lines: string[] = [];\n  lines.push('');\n  lines.push('  C1–C16 EXTENSION SDK CONFORMANCE  (docs/65 §5)');\n  lines.push('  ─────────────────────────────────────────────');\n  for (const v of report.verdicts) {\n    const tag = v.disposition === 'phase5' ? ' [phase5]' : '';\n    lines.push(`  ${ICON[v.status]} ${v.id.padEnd(16)} ${v.title}${tag}`);\n    for (const n of v.notes) lines.push(`        ↳ ${n}`);\n  }\n  lines.push('  ─────────────────────────────────────────────');\n  lines.push(\n    `  enforced failures: ${report.enforcedFailures}   ` +\n      `phase5 pending: ${report.phase5Pending}   phase5 regressions: ${report.phase5Regressions}`,\n  );\n  const strictFail = (opts?.strict ?? false) && report.phase5Pending > 0;\n  if (report.ok && !strictFail) {\n    lines.push('  RESULT: GREEN — every enforced requirement holds (🟡 rows are Phase-5 targets).');\n  } else {\n    lines.push('  RESULT: RED — see 🔴 rows above.');\n  }\n  lines.push('');\n  return lines.join('\\n');\n}\n","/**\n * Conformance subjects — the inputs the C1–C16 suite runs against.\n *\n * TWO distinct CONFORMANT reference extensions (docs/61 Phase-4 requirement: \"≥2\n * distinct reference extensions … design a second\"):\n *   • Seam Probe — the canonical multi-channel probe: reads brain + host-context, asks\n *     host-command, has a rendering surface + a data endpoint + a composer capability.\n *   • Notes Lens — a deliberately DIFFERENT shape: brain-only (one declared permission),\n *     a data endpoint + a contextual action (chat/invoke), no host-context/command.\n * Two different declared footprints and contribution kinds is what makes C2/C3/C8\n * non-trivial — a suite over one extension can't tell \"honours the contract\" from\n * \"happens to match this one extension\".\n *\n * Plus a NEGATIVE FIXTURE per check — a tiny extension built to FAIL exactly one\n * requirement. Without these the suite is vacuous (the Phase-3 red-team's verdict on\n * the old harness): every check here must both PASS the references AND REJECT its\n * negative.\n */\n\nimport {\n  defineComposerCapability,\n  defineContextualAction,\n  defineDataEndpoint,\n  defineExtension,\n  defineSurface,\n  requiresKernelPermissions,\n} from '../index.js';\nimport { clearRawContributionIdUsages } from '../contribution-id-deprecation.js';\nimport type {\n  AnsweringPort,\n  ComposerCapabilityPort,\n  DataEndpointPort,\n  HostPort,\n  InvokablePort,\n  SeamCallContext,\n  VerifiedPrincipal,\n} from '../seam-ports.js';\nimport type { ConformanceSubject, NegativeFixture } from './conformance.js';\n\n// Build everything below from a clean deprecation registry so C7 sees ONLY the raw id\n// the rawId fixture deliberately uses (this module's defines are the only source).\nclearRawContributionIdUsages();\n\nconst principal = (id: string): VerifiedPrincipal => ({ kind: 'plugin', id, attestedBy: 'session' });\nconst strArg = (v: unknown): string => (typeof v === 'string' ? v : '');\n\n// ─── Reference #1: Seam Probe (multi-channel, conformant) ───────────────────────\n\nconst seamProbe: ConformanceSubject = {\n  name: 'seam-probe',\n  principal: principal('plugin.seam-probe'),\n  definition: defineExtension({\n    pluginId: 'plugin.seam-probe',\n    displayName: 'Seam Probe',\n    permissions: requiresKernelPermissions('brain.read', 'host.context.read', 'host.command.invoke'),\n    surfaces: [\n      defineSurface({\n        ext: 'seam-probe',\n        displayName: 'Seam Probe',\n        requiredHostCapabilities: [],\n        mount: 'web/seam-probe',\n        hostSlots: ['workspace.surface'],\n      }),\n    ],\n    dataEndpoints: [defineDataEndpoint({ ext: 'seam-probe', name: 'brain', displayName: 'Seam Probe brain' })],\n    composerCapabilities: [\n      defineComposerCapability({ ext: 'seam-probe', displayName: 'Seam Probe composer', requiredHostCapabilities: [] }),\n    ],\n  }),\n  activate(host: HostPort) {\n    const map = new Map<string, AnsweringPort>();\n    map.set('data.seam-probe.brain', {\n      async query(payload, ctx) {\n        const hits = await host.brain.query(strArg(payload.filter?.q), { limit: payload.limit });\n        return hits.map((h) => ({ id: h.id, title: h.title, principalId: ctx.principal.id }));\n      },\n    } satisfies DataEndpointPort);\n    map.set('composer.seam-probe', {\n      async describe() {\n        return { commands: [{ commandId: 'seam-probe.ping', displayName: 'Ping host' }] };\n      },\n      async invoke(payload, ctx) {\n        const snapshot = await host.context.snapshot(); // host.context.read\n        const command = await host.command.invoke(payload.commandId, payload.args); // host.command.invoke\n        return { ok: true, data: { activeAgent: snapshot.activeAgent, principalId: ctx.principal.id, command } };\n      },\n    } satisfies ComposerCapabilityPort);\n    // surface.seam-probe is a RENDERING kind — no answering port (C8).\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// ─── Reference #2: Notes Lens (brain-only, distinct shape, conformant) ──────────\n\nconst notesLens: ConformanceSubject = {\n  name: 'notes-lens',\n  principal: principal('plugin.notes-lens'),\n  definition: defineExtension({\n    pluginId: 'plugin.notes-lens',\n    displayName: 'Notes Lens',\n    permissions: requiresKernelPermissions('brain.read'),\n    surfaces: [\n      defineSurface({\n        ext: 'notes-lens',\n        displayName: 'Notes Lens',\n        requiredHostCapabilities: [],\n        mount: 'web/notes-lens',\n        hostSlots: ['workspace.surface'],\n      }),\n    ],\n    dataEndpoints: [defineDataEndpoint({ ext: 'notes-lens', name: 'recent', displayName: 'Notes Lens recent' })],\n    contextualActions: [\n      defineContextualAction({\n        ext: 'notes-lens',\n        name: 'summarize',\n        displayName: 'Summarize notes',\n        requiredHostCapabilities: [],\n      }),\n    ],\n  }),\n  activate(host: HostPort) {\n    const map = new Map<string, AnsweringPort>();\n    map.set('data.notes-lens.recent', {\n      async query(payload, ctx) {\n        const hits = await host.brain.query(strArg(payload.filter?.q), { limit: payload.limit });\n        const stats = await host.brain.stats();\n        return [{ noteCount: stats.notes, top: hits[0]?.title ?? null, principalId: ctx.principal.id }];\n      },\n    } satisfies DataEndpointPort);\n    map.set('contextualAction.notes-lens.summarize', {\n      async invoke(payload, ctx) {\n        const hits = await host.brain.query(strArg(payload.args?.q), {});\n        return { ok: true, data: { summary: hits.map((h) => h.title).join(', '), principalId: ctx.principal.id } };\n      },\n    } satisfies InvokablePort);\n    // surface.notes-lens is a RENDERING kind — no answering port (C8).\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\nexport const REFERENCE_EXTENSIONS: readonly ConformanceSubject[] = [seamProbe, notesLens];\n\n// ─── Negative fixtures (one per check; each must be REJECTED) ────────────────────\n\nconst emptyActivate = (): ReadonlyMap<string, AnsweringPort> => new Map();\n\n// C1: reaches PAST the injected port — returns brain-shaped data from a \"global\",\n// so it yields host data even with zero grants (it never touches the gated port).\nconst globalReach: ConformanceSubject = {\n  name: 'global-reach',\n  principal: principal('plugin.global-reach'),\n  definition: defineExtension({\n    pluginId: 'plugin.global-reach',\n    displayName: 'Global Reach',\n    permissions: requiresKernelPermissions('brain.read'),\n    dataEndpoints: [defineDataEndpoint({ ext: 'global-reach', name: 'brain', displayName: 'GR brain' })],\n  }),\n  activate() {\n    const map = new Map<string, AnsweringPort>();\n    map.set('data.global-reach.brain', {\n      async query(_payload, ctx) {\n        return [{ id: 'leak', title: 'Leaked Global Row', principalId: ctx.principal.id }];\n      },\n    } satisfies DataEndpointPort);\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C2: agent-blind — returns the SAME row regardless of ctx.activeAgent.\nconst agentBlind: ConformanceSubject = {\n  name: 'agent-blind',\n  principal: principal('plugin.agent-blind'),\n  definition: defineExtension({\n    pluginId: 'plugin.agent-blind',\n    displayName: 'Agent Blind',\n    permissions: requiresKernelPermissions('brain.read'),\n    dataEndpoints: [defineDataEndpoint({ ext: 'agent-blind', name: 'brain', displayName: 'AB brain' })],\n  }),\n  activate() {\n    const map = new Map<string, AnsweringPort>();\n    map.set('data.agent-blind.brain', {\n      async query(_payload, ctx) {\n        return [{ id: 'const', title: 'CONSTANT', principalId: ctx.principal.id }];\n      },\n    } satisfies DataEndpointPort);\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C3a: under-declared — uses brain.read but declares NO permission.\nconst underDeclared: ConformanceSubject = {\n  name: 'under-declared',\n  principal: principal('plugin.under-declared'),\n  definition: defineExtension({\n    pluginId: 'plugin.under-declared',\n    displayName: 'Under Declared',\n    permissions: [],\n    dataEndpoints: [defineDataEndpoint({ ext: 'under-declared', name: 'brain', displayName: 'UD brain' })],\n  }),\n  activate(host: HostPort) {\n    const map = new Map<string, AnsweringPort>();\n    map.set('data.under-declared.brain', {\n      async query(_payload, ctx) {\n        const hits = await host.brain.query('', {});\n        return hits.map((h) => ({ title: h.title, principalId: ctx.principal.id }));\n      },\n    } satisfies DataEndpointPort);\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C3b: over-declared — declares host.command.invoke it never uses.\nconst overDeclared: ConformanceSubject = {\n  name: 'over-declared',\n  principal: principal('plugin.over-declared'),\n  definition: defineExtension({\n    pluginId: 'plugin.over-declared',\n    displayName: 'Over Declared',\n    permissions: requiresKernelPermissions('brain.read', 'host.command.invoke'),\n    dataEndpoints: [defineDataEndpoint({ ext: 'over-declared', name: 'brain', displayName: 'OD brain' })],\n  }),\n  activate(host: HostPort) {\n    const map = new Map<string, AnsweringPort>();\n    map.set('data.over-declared.brain', {\n      async query(_payload, ctx) {\n        const hits = await host.brain.query('', {});\n        return hits.map((h) => ({ title: h.title, principalId: ctx.principal.id }));\n      },\n    } satisfies DataEndpointPort);\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C4: reads its identity from the (forged) payload, not ctx.principal.\nconst payloadIdentity: ConformanceSubject = {\n  name: 'payload-identity',\n  principal: principal('plugin.payload-identity'),\n  definition: defineExtension({\n    pluginId: 'plugin.payload-identity',\n    displayName: 'Payload Identity',\n    dataEndpoints: [defineDataEndpoint({ ext: 'payload-identity', name: 'rows', displayName: 'PI rows' })],\n  }),\n  activate: emptyActivate,\n  identityProbe: (_ctx, forgedExtensionId) => forgedExtensionId,\n};\n\n// C7: a raw-string contributionId (the deprecated path).\nconst rawId: ConformanceSubject = {\n  name: 'raw-id',\n  principal: principal('plugin.raw-id'),\n  definition: defineExtension({\n    pluginId: 'plugin.raw-id',\n    displayName: 'Raw Id',\n    surfaces: [defineSurface({ contributionId: 'surface.raw-id-thing', displayName: 'Raw', requiredHostCapabilities: [] })],\n  }),\n  activate: emptyActivate,\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C8: a surface (rendering kind) that ALSO answers ops.\nconst dualKind: ConformanceSubject = {\n  name: 'dual-kind',\n  principal: principal('plugin.dual-kind'),\n  definition: defineExtension({\n    pluginId: 'plugin.dual-kind',\n    displayName: 'Dual Kind',\n    surfaces: [\n      defineSurface({ ext: 'dual-kind', displayName: 'Dual', requiredHostCapabilities: [], mount: 'web/dual' }),\n    ],\n  }),\n  activate() {\n    const map = new Map<string, AnsweringPort>();\n    map.set('surface.dual-kind', {\n      async query() {\n        return [];\n      },\n    } satisfies DataEndpointPort); // a surface must NOT answer (C8)\n    return map;\n  },\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C15: a contribution requiring a KERNEL PERMISSION the extension never declares — the\n// grant-authority breach (DIV-8: host capabilities are contribution-scoped and NOT\n// subset-checked; kernel permissions are the gate's grant authority and ARE).\nconst overReachContribution: ConformanceSubject = {\n  name: 'over-reach-contribution',\n  principal: principal('plugin.over-reach'),\n  definition: defineExtension({\n    pluginId: 'plugin.over-reach',\n    displayName: 'Over Reach',\n    permissions: [], // extension-level: declares NO kernel permissions\n    dataEndpoints: [\n      defineDataEndpoint({\n        ext: 'over-reach',\n        name: 'brain',\n        displayName: 'OR brain',\n        requiredKernelPermissions: ['brain.read'], // contribution-level: reaches for one ungranted\n      }),\n    ],\n  }),\n  activate: emptyActivate,\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\n// C16: a divergent PAIR — same composer.capabilities.invoke domain, gated at two\n// different levels (extension vs contribution).\nconst composerExtensionGated: ConformanceSubject = {\n  name: 'composer-extension-gated',\n  principal: principal('plugin.composer-ext-gated'),\n  definition: defineExtension({\n    pluginId: 'plugin.composer-ext-gated',\n    displayName: 'Composer Extension Gated',\n    permissions: requiresKernelPermissions('composer.capabilities.invoke'),\n    composerCapabilities: [\n      defineComposerCapability({ ext: 'ext-gated', displayName: 'Ext gated', requiredHostCapabilities: [] }),\n    ],\n  }),\n  activate: emptyActivate,\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\nconst composerContributionGated: ConformanceSubject = {\n  name: 'composer-contribution-gated',\n  principal: principal('plugin.composer-contrib-gated'),\n  definition: defineExtension({\n    pluginId: 'plugin.composer-contrib-gated',\n    displayName: 'Composer Contribution Gated',\n    composerCapabilities: [\n      defineComposerCapability({\n        ext: 'contrib-gated',\n        displayName: 'Contrib gated',\n        requiredHostCapabilities: [],\n        requiredKernelPermissions: ['composer.capabilities.invoke'], // gated at the WRONG level vs the pair\n      }),\n    ],\n  }),\n  activate: emptyActivate,\n  identityProbe: (ctx) => ctx.principal.id,\n};\n\nexport const NEGATIVE_FIXTURES: readonly NegativeFixture[] = [\n  { violates: 'C1', subject: globalReach },\n  { violates: 'C2', subject: agentBlind },\n  { violates: 'C3', subject: underDeclared },\n  { violates: 'C3', subject: overDeclared },\n  { violates: 'C4', subject: payloadIdentity },\n  { violates: 'C7', subject: rawId },\n  { violates: 'C8', subject: dualKind },\n  { violates: 'C15', subject: overReachContribution },\n  { violates: 'C16', subject: composerExtensionGated },\n  { violates: 'C16', subject: composerContributionGated },\n];\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAqBO,IAAM,wBAAN,MAAqD;AAAA,EAC1D,YAA6B,OAA2B,CAAC,GAAG;AAA/B;AAAA,EAAgC;AAAA,EAAhC;AAAA,EAE7B,MAAM,QAAiC;AACrC,WAAO,EAAE,UAAU,KAAK,KAAK,UAAU,UAAU,GAAG,OAAO,KAAK,KAAK,OAAO,UAAU,EAAE;AAAA,EAC1F;AAAA,EAEA,MAAM,MAAM,MAAc,MAAgD;AACxE,UAAM,SAAS,KAAK,KAAK,EAAE,YAAY;AACvC,UAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,GAClC,OAAO,CAAC,WAAW,OAAO,MAAM,YAAY,EAAE,SAAS,MAAM,CAAC,EAC9D,IAAI,CAAC,QAAQ,WAAW,EAAE,IAAI,OAAO,IAAI,OAAO,OAAO,OAAO,OAAO,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,EAAE,EAAE;AAC/G,WAAO,OAAO,MAAM,UAAU,WAAW,KAAK,MAAM,GAAG,KAAK,KAAK,IAAI;AAAA,EACvE;AACF;AAOO,IAAM,eAAN,MAAgD;AAAA,EACpC,SAAS,oBAAI,IAAmC;AAAA,EAEjE,YAAY,OAA2C,CAAC,GAAG;AACzD,eAAW,CAAC,WAAW,UAAU,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC1D,WAAK,OAAO,IAAI,WAAW,IAAI,sBAAsB,UAAU,CAAC;AAAA,IAClE;AAAA,EACF;AAAA,EAEA,MAAM,WAA0C;AAC9C,QAAI,WAAW,KAAK,OAAO,IAAI,SAAS;AACxC,QAAI,CAAC,UAAU;AACb,iBAAW,IAAI,sBAAsB;AACrC,WAAK,OAAO,IAAI,WAAW,QAAQ;AAAA,IACrC;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,OAAO,KAAsB,QAAmD;AAC9E,UAAM,MAAgB;AAAA,MACpB;AAAA,MACA,OAAO,KAAK,MAAM,IAAI,WAAW;AAAA,MACjC,SAAS,wBAAwB,GAAG;AAAA,MACpC,SAAS;AAAA;AAAA,IAEX;AACA,WAAO,cAAc,KAAK,MAAM;AAAA,EAClC;AACF;AAEA,SAAS,wBAAwB,KAAuC;AACtE,SAAO,EAAE,UAAU,aAAa,EAAE,aAAa,IAAI,YAAY,GAAG;AACpE;AAEA,IAAM,yBAA0C;AAAA,EAC9C,UAAU,YAAY,CAAC;AAAA,EACvB,QAAQ,OAAO,WAAW,UAAiC;AAAA,IACzD,IAAI;AAAA,IACJ,MAAM,EAAE,SAAS,WAAW,MAAM,QAAQ,CAAC,EAAE;AAAA,EAC/C;AACF;;;ACgGA,IAAM,aAA8C,oBAAI,IAAwB;AAAA,EAC9E;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,IAAM,YAA6C,oBAAI,IAAwB;AAG/E,IAAM,oBAAoB;AAAA,EACxB,OAAO;AAAA,EACP,SAAS;AAAA,EACT,SAAS;AACX;AAEA,SAAS,OAAOA,YAA8B,OAAgC;AAC5E,SAAO,oBAAoB,EAAE,WAAAA,YAAW,aAAa,YAAY,KAAK,GAAG,eAAe,EAAE,CAAC;AAC7F;AAMA,SAAS,WAAW,MAAsE;AACxF,QAAM,UAAU,oBAAI,IAAwB;AAC5C,QAAM,UAAoB;AAAA,IACxB,KAAK,KAAK;AAAA,IACV,IAAI,QAAQ;AACV,cAAQ,IAAI,kBAAkB,KAAK;AACnC,aAAO,KAAK;AAAA,IACd;AAAA,IACA,IAAI,UAAU;AACZ,cAAQ,IAAI,kBAAkB,OAAO;AACrC,aAAO,KAAK;AAAA,IACd;AAAA,IACA,IAAI,UAAU;AACZ,cAAQ,IAAI,kBAAkB,OAAO;AACrC,aAAO,KAAK;AAAA,IACd;AAAA,IACA,QAAQ,KAAK;AAAA,EACf;AACA,SAAO,EAAE,MAAM,SAAS,QAAQ;AAClC;AAEA,IAAM,iBAAmC,EAAE,QAAQ,EAAE,GAAG,GAAG,GAAG,OAAO,EAAE;AACvE,IAAM,oBAAyC,CAAC;AAChD,IAAM,kBAAqC,EAAE,WAAW,oBAAoB,MAAM,EAAE,GAAG,GAAG,EAAE;AAU5F,eAAe,SAAS,MAAqB,KAA8C;AACzF,QAAM,MAAkF,CAAC;AACzF,QAAM,IAAI;AAKV,MAAI,OAAO,EAAE,UAAU,WAAY,KAAI,OAAO,MAAM,EAAE,MAAM,gBAAgB,GAAG;AAC/E,MAAI,OAAO,EAAE,aAAa,WAAY,OAAM,EAAE,SAAS,mBAAmB,GAAG;AAC7E,MAAI,OAAO,EAAE,WAAW,WAAY,KAAI,WAAW,MAAM,EAAE,OAAO,iBAAiB,GAAG;AACtF,SAAO;AACT;AAIA,eAAe,aAAa,SAA6B,MAAsD;AAC7G,QAAM,MAAM,OAAO,QAAQ,WAAW,SAAS;AAC/C,QAAM,EAAE,MAAM,QAAQ,IAAI,WAAW,KAAK,OAAO,KAAK,UAAU,CAAC;AACjE,QAAM,gBAAgB,QAAQ,SAAS,IAAI;AAC3C,aAAW,OAAO,cAAc,OAAO,GAAG;AACxC,QAAI;AACF,YAAM,SAAS,KAAK,GAAG;AAAA,IACzB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,YAA0D;AACzF,QAAM,QAAQ,IAAI,IAAwB,OAAO,OAAO,iBAAiB,CAAC;AAC1E,SAAO,IAAI,KAAK,WAAW,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC;AAC3E;AAEA,SAAS,kBAAkB,eAA8E;AACvG,aAAW,CAAC,IAAI,IAAI,KAAK,eAAe;AACtC,QAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAaA,IAAM,SAA2B;AAAA,EAC/B;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM,IAAI,EAAE,UAAU,WAAW,KAAK,GAAG;AACvC,YAAM,QAAkB,CAAC;AACzB,YAAM,QAAQ,OAAO,MAAiE;AACpF,cAAM,MAAM,OAAO,EAAE,WAAW,SAAS;AACzC,cAAM,OAAO,KAAK,OAAO,KAAK,SAAS;AACvC,cAAM,gBAAgB,EAAE,SAAS,IAAI;AACrC,YAAI,kBAAkB;AACtB,mBAAW,OAAO,cAAc,OAAO,GAAG;AACxC,cAAI;AACF,kBAAM,MAAM,MAAM,SAAS,KAAK,GAAG;AAEnC,kBAAM,cAAc,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,WAAW,KAAK,SAAS,KAAK,eAAe,CAAC;AAC9F,kBAAM,aACJ,IAAI,UAAU,OAAO,QACrB,OAAO,IAAI,SAAS,SAAS,YAC7B,IAAI,SAAS,SAAS,QACtB,iBAAkB,IAAI,SAAS;AACjC,gBAAI,cAAc,WAAY,mBAAkB;AAAA,UAClD,SAAS,KAAK;AACZ,gBAAI,EAAE,eAAe,sBAAuB,OAAM;AAAA,UACpD;AAAA,QACF;AACA,eAAO,EAAE,gBAAgB;AAAA,MAC3B;AAEA,iBAAW,KAAK,UAAU;AACxB,YAAI,wBAAwB,EAAE,UAAU,EAAE,SAAS,EAAG;AACtD,cAAM,EAAE,gBAAgB,IAAI,MAAM,MAAM,CAAC;AACzC,YAAI,gBAAiB,OAAM,KAAK,GAAG,EAAE,IAAI,2EAAsE;AAAA,MACjH;AACA,iBAAW,KAAK,WAAW;AACzB,cAAM,EAAE,gBAAgB,IAAI,MAAM,MAAM,CAAC;AACzC,YAAI,CAAC,gBAAiB,OAAM,KAAK,YAAY,EAAE,IAAI,oDAAoD;AAAA,MACzG;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM,IAAI,EAAE,UAAU,WAAW,KAAK,GAAG;AACvC,YAAM,QAAkB,CAAC;AACzB,YAAM,SAAS,OAAO,MAAwD;AAC5E,cAAM,IAAI,OAAO,EAAE,WAAW,SAAS;AACvC,cAAM,IAAI,OAAO,EAAE,WAAW,QAAQ;AACtC,cAAM,QAAQ,kBAAkB,EAAE,SAAS,KAAK,OAAO,GAAG,UAAU,CAAC,CAAC;AACtE,cAAM,QAAQ,kBAAkB,EAAE,SAAS,KAAK,OAAO,GAAG,UAAU,CAAC,CAAC;AACtE,YAAI,CAAC,SAAS,CAAC,MAAO,QAAO;AAC7B,cAAM,KAAK,KAAK,WAAW,MAAM,SAAS,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/D,cAAM,KAAK,KAAK,WAAW,MAAM,SAAS,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/D,eAAO,OAAO;AAAA,MAChB;AACA,iBAAW,KAAK,UAAU;AACxB,cAAM,IAAI,MAAM,OAAO,CAAC;AACxB,YAAI,MAAM,MAAO,OAAM,KAAK,GAAG,EAAE,IAAI,sFAAiF;AAAA,MACxH;AACA,iBAAW,KAAK,WAAW;AACzB,cAAM,IAAI,MAAM,OAAO,CAAC;AACxB,YAAI,MAAM,MAAO,OAAM,KAAK,YAAY,EAAE,IAAI,wEAAwE;AAAA,MACxH;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM,IAAI,EAAE,UAAU,WAAW,KAAK,GAAG;AACvC,YAAM,QAAkB,CAAC;AACzB,YAAM,WAAW,OAAO,MAAkD;AACxE,cAAM,WAAW,wBAAwB,EAAE,UAAU;AACrD,cAAM,OAAO,MAAM,aAAa,GAAG,IAAI;AACvC,cAAM,aAAa,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AAC3D,cAAM,aAAa,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;AAC3D,YAAI,WAAW,UAAU,WAAW,QAAQ;AAC1C,iBAAO,sBAAsB,WAAW,KAAK,GAAG,CAAC,wBAAwB,WAAW,KAAK,GAAG,CAAC;AAAA,QAC/F;AACA,eAAO;AAAA,MACT;AACA,iBAAW,KAAK,UAAU;AACxB,cAAM,IAAI,MAAM,SAAS,CAAC;AAC1B,YAAI,EAAG,OAAM,KAAK,GAAG,EAAE,IAAI,KAAK,CAAC,EAAE;AAAA,MACrC;AACA,iBAAW,KAAK,WAAW;AACzB,cAAM,IAAI,MAAM,SAAS,CAAC;AAC1B,YAAI,CAAC,EAAG,OAAM,KAAK,YAAY,EAAE,IAAI,qDAAqD;AAAA,MAC5F;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,UAAU,GAAG;AAC3B,YAAM,QAAkB,CAAC;AACzB,YAAM,SAAS;AACf,iBAAW,KAAK,UAAU;AACxB,cAAM,MAAM,OAAO,EAAE,WAAW,SAAS;AACzC,cAAM,WAAW,EAAE,cAAc,KAAK,MAAM;AAC5C,YAAI,aAAa,IAAI,UAAU,GAAI,OAAM,KAAK,GAAG,EAAE,IAAI,wBAAwB,QAAQ,8BAAyB,IAAI,UAAU,EAAE,GAAG;AAAA,MACrI;AACA,iBAAW,KAAK,WAAW;AACzB,cAAM,MAAM,OAAO,EAAE,WAAW,SAAS;AACzC,cAAM,WAAW,EAAE,cAAc,KAAK,MAAM;AAC5C,YAAI,aAAa,IAAI,UAAU,GAAI,OAAM,KAAK,YAAY,EAAE,IAAI,+DAA+D;AAAA,MACjI;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,KAAK,GAAG;AACtB,YAAM,QAAkB,CAAC;AACzB,iBAAW,KAAK,UAAU;AACxB,cAAM,MAAM,OAAO,EAAE,WAAW,SAAS;AACzC,mBAAW,QAAQ,wBAAwB,EAAE,UAAU,GAAG;AACxD,gBAAM,SAAU,OAAO,KAAK,iBAAiB,EAAyC;AAAA,YACpF,CAAC,MAAM,kBAAkB,CAAC,MAAM;AAAA,UAClC;AACA,cAAI,CAAC,OAAQ;AACb,gBAAM,OAAO,KAAK,OAAO,KAAK,SAAS;AACvC,cAAI;AACF,iBAAK,KAAK,MAAM;AAChB,kBAAM,KAAK,GAAG,EAAE,IAAI,gBAAgB,MAAM,gCAAgC;AAAA,UAC5E,SAAS,KAAK;AACZ,gBAAI,EAAE,eAAe,yBAAyB,IAAI,eAAe,MAAM;AACrE,oBAAM,KAAK,GAAG,EAAE,IAAI,MAAM,MAAM,UAAU,OAAO,GAAG,CAAC,oCAAoC,IAAI,GAAG;AAAA,YAClG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM;AAGJ,YAAM,QAAkB,CAAC;AACzB,YAAM,WAAkC;AAAA,QACtC,EAAE,IAAI,OAAO,SAAS,EAAE,OAAO,YAAY,OAAO,QAAQ,EAAE;AAAA,QAC5D,EAAE,IAAI,OAAO,SAAS,EAAE,OAAO,2BAA2B,SAAS,CAAC,oBAAoB,EAAE,EAAE;AAAA,QAC5F,EAAE,IAAI,OAAO,SAAS,EAAE,OAAO,qBAAqB,QAAQ,CAAC,YAAY,EAAE,EAAE;AAAA,QAC7E,EAAE,IAAI,OAAO,SAAS,EAAE,OAAO,qBAAqB,aAAa,iBAAiB,EAAE;AAAA,MACtF;AACA,YAAM,cAAc,oBAAI,IAAI,CAAC,YAAY,2BAA2B,qBAAqB,mBAAmB,CAAC;AAC7G,iBAAW,KAAK,UAAU;AACxB,YAAI,EAAE,IAAI;AACR,gBAAM,KAAK,4BAA4B;AACvC;AAAA,QACF;AACA,cAAM,QAAS,EAAE,QAAgC;AACjD,YAAI,OAAO,UAAU,YAAY,UAAU,aAAa,CAAC,YAAY,IAAI,KAAK,GAAG;AAC/E,gBAAM,KAAK,kBAAkB,OAAO,KAAK,CAAC,+BAA+B;AAAA,QAC3E;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,UAAU,GAAG;AAC3B,YAAM,QAAkB,CAAC;AAGzB,YAAM,MAAM,IAAI,IAAI,wBAAwB,CAAC;AAC7C,iBAAW,KAAK,UAAU;AACxB,mBAAW,KAAK,6BAA6B,EAAE,UAAU,EAAE,eAAe;AACxE,cAAI,IAAI,IAAI,EAAE,cAAc,EAAG,OAAM,KAAK,GAAG,EAAE,IAAI,MAAM,EAAE,cAAc,uCAAuC;AAEhH,cAAI;AACF,kBAAM,MAAM,oBAAoB,EAAE,cAAc;AAChD,gBAAI,IAAI,UAAU,MAAO,OAAM,KAAK,GAAG,EAAE,IAAI,MAAM,EAAE,cAAc,0BAA0B;AAAA,UAC/F,SAAS,KAAK;AACZ,kBAAM,KAAK,GAAG,EAAE,IAAI,MAAM,EAAE,cAAc,2BAAsB,OAAO,GAAG,CAAC,EAAE;AAAA,UAC/E;AAAA,QACF;AAAA,MACF;AACA,iBAAW,KAAK,WAAW;AACzB,cAAM,MAAM,6BAA6B,EAAE,UAAU,EAAE,cAAc,IAAI,CAAC,MAAM,EAAE,cAAc;AAChG,YAAI,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC,EAAG,OAAM,KAAK,YAAY,EAAE,IAAI,uDAAuD;AAAA,MAC1H;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,WAAW,KAAK,GAAG;AACjC,YAAM,QAAkB,CAAC;AACzB,YAAM,YAAY,oBAAI,IAAI,CAAC,WAAW,eAAe,CAAC;AACtD,YAAM,YAAY,oBAAI,IAAI,CAAC,gBAAgB,sBAAsB,kBAAkB,CAAC;AACpF,YAAM,QAAQ,CAAC,MAAoC;AACjD,cAAM,QAAkB,CAAC;AACzB,cAAM,MAAM,OAAO,EAAE,WAAW,SAAS;AACzC,cAAM,QAAQ,EAAE,SAAS,KAAK,OAAO,KAAK,UAAU,CAAC;AACrD,mBAAW,KAAK,6BAA6B,EAAE,UAAU,EAAE,eAAe;AACxE,gBAAM,UAAU,MAAM,IAAI,EAAE,cAAc;AAC1C,cAAI,UAAU,IAAI,EAAE,IAAI,KAAK,QAAS,OAAM,KAAK,GAAG,EAAE,cAAc,KAAK,EAAE,IAAI,8BAA8B;AAC7G,cAAI,UAAU,IAAI,EAAE,IAAI,KAAK,CAAC,QAAS,OAAM,KAAK,GAAG,EAAE,cAAc,KAAK,EAAE,IAAI,8BAA8B;AAAA,QAChH;AACA,eAAO;AAAA,MACT;AACA,iBAAW,KAAK,SAAU,YAAW,KAAK,MAAM,CAAC,EAAG,OAAM,KAAK,GAAG,EAAE,IAAI,KAAK,CAAC,EAAE;AAChF,iBAAW,KAAK,WAAW;AACzB,YAAI,MAAM,CAAC,EAAE,WAAW,EAAG,OAAM,KAAK,YAAY,EAAE,IAAI,6CAA6C;AAAA,MACvG;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM,IAAI,EAAE,UAAU,KAAK,GAAG;AAC5B,YAAM,QAAkB,CAAC;AACzB,iBAAW,KAAK,UAAU;AACxB,cAAM,MAAM,OAAO,EAAE,WAAW,SAAS;AACzC,cAAM,SAAS,IAAI,IAAwB,EAAE,WAAW,eAAe,CAAC,CAAC;AACzE,YAAI;AACF,gBAAM,QAAQ,EAAE,SAAS,KAAK,OAAO,KAAK,MAAM,CAAC;AACjD,qBAAW,CAAC,IAAI,GAAG,KAAK,OAAO;AAC7B,kBAAM,MAAM,MAAM,SAAS,KAAK,GAAG;AACnC,gBAAI,IAAI,YAAY,IAAI,SAAS,OAAO,QAAQ,IAAI,SAAS,OAAO,OAAO;AACzE,oBAAM,KAAK,GAAG,EAAE,IAAI,IAAI,EAAE,wCAAwC;AAAA,YACpE;AAAA,UACF;AAAA,QACF,SAAS,KAAK;AACZ,gBAAM,KAAK,GAAG,EAAE,IAAI,sBAAsB,OAAO,GAAG,CAAC,EAAE;AAAA,QACzD;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM,IAAI,EAAE,UAAU,OAAO,GAAG;AAC9B,YAAM,EAAE,OAAO,IAAI;AACnB,UAAI,CAAC,OAAQ,QAAO,QAAQ,sDAAsD;AAClF,YAAM,QAAkB,CAAC;AACzB,YAAM,MAAqB,CAAC,SAAS,YAAY,UAAU,aAAa,OAAO;AAC/E,iBAAW,KAAK,UAAU;AACxB,cAAM,MAAM,OAAO,EAAE,WAAW,gBAAgB;AAChD,cAAM,UAAU,OAAO,SAAS,EAAE,UAAU,IAAI,GAAG;AACnD,YAAI,QAAQ,GAAI;AAChB,mBAAW,MAAM,KAAK;AACpB,gBAAM,MAAM,MAAM,OAAO,MAAM,IAAI,EAAE,aAAa,EAAE,UAAU,IAAI,gBAAgB,SAAS,GAAG,QAAW,GAAG;AAC5G,cAAI,IAAI,OAAO,MAAO,OAAM,KAAK,GAAG,EAAE,IAAI,eAAe,EAAE,0DAA0D;AAAA,QACvH;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,OAAO,GAAG;AACd,YAAM,EAAE,OAAO,IAAI;AACnB,UAAI,CAAC,OAAQ,QAAO,QAAQ,sDAAsD;AAClF,YAAM,IAAI,OAAO,yBAAyB;AAC1C,aAAO,MAAM,IACT,EAAE,QAAQ,QAAQ,OAAO,CAAC,EAAE,IAC5B,EAAE,QAAQ,QAAQ,OAAO,CAAC,8BAA8B,CAAC,sBAAsB,EAAE;AAAA,IACvF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,OAAO,GAAG;AACxB,YAAM,EAAE,OAAO,IAAI;AACnB,UAAI,CAAC,OAAQ,QAAO,QAAQ,sDAAsD;AAClF,YAAM,QAAkB,CAAC;AACzB,iBAAW,KAAK,UAAU;AACxB,cAAM,IAAI,OAAO,SAAS,EAAE,UAAU,IAAI,OAAO,EAAE,WAAW,SAAS,CAAC;AACxE,cAAM,IAAI,OAAO,SAAS,EAAE,UAAU,IAAI,OAAO,EAAE,WAAW,SAAS,CAAC;AACxE,YAAI,CAAC,EAAE,IAAI;AACT,cAAI,EAAE,QAAQ,UAAU,cAAc,EAAE,QAAQ,UAAU,SAAS;AACjE,kBAAM,KAAK,GAAG,EAAE,IAAI,iCAAiC,EAAE,QAAQ,KAAK,qBAAqB;AAAA,UAC3F;AACA,cAAI,CAAC,EAAE,GAAI,OAAM,KAAK,GAAG,EAAE,IAAI,4DAA4D;AAAA,QAC7F;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM,MAAM;AACV,YAAM,QAAkB,CAAC;AACzB,YAAM,EAAE,2BAAAC,4BAA2B,0BAAAC,0BAAyB,IAAI,MAAM,OAAO,aAAa;AAC1F,YAAM,cAAc,CAAC,IAAmB,SAAiB;AACvD,YAAI;AACF,aAAG;AACH,gBAAM,KAAK,GAAG,IAAI,+BAA+B;AAAA,QACnD,QAAQ;AAAA,QAER;AAAA,MACF;AACA,kBAAY,MAAMD,2BAA0B,kBAAwC,GAAG,2BAA2B;AAClH,kBAAY,MAAMC,0BAAyB,eAAwB,GAAG,0BAA0B;AAEhG,UAAI;AACF,QAAAD,2BAA0B,YAAY;AAAA,MACxC,SAAS,KAAK;AACZ,cAAM,KAAK,kDAAkD,OAAO,GAAG,CAAC,EAAE;AAAA,MAC5E;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,MAAM;AACJ,YAAM,UAAU,mBAAmB,EAAE,KAAK,aAAa,MAAM,WAAW,aAAa,UAAU,CAAC;AAChG,YAAM,QAAQ,mBAAmB,EAAE,KAAK,aAAa,MAAM,SAAS,aAAa,SAAS,0BAA0B,CAAC,EAAE,CAAC;AACxH,YAAM,OAAO,mBAAmB;AAAA,QAC9B,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,0BAA0B,yBAA4B;AAAA,MACxD,CAAC;AACD,YAAM,QAAQ,CAAC,SAAS,OAAO,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,4BAA4B,IAAI,CAAC;AAClG,YAAM,QAAQ,IAAI,IAAI,KAAK,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,iDAAiD,MAAM,KAAK,KAAK,CAAC,EAAE;AACpH,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,WAAW,OAAO,GAAG;AACnC,YAAM,WAAW,OAAO,+BAA+B;AACvD,YAAM,QAAkB,CAAC;AACzB,iBAAW,KAAK,UAAU;AACxB,cAAM,SAAS,SAAS,EAAE,UAAU;AACpC,YAAI,OAAO,OAAQ,OAAM,KAAK,GAAG,EAAE,IAAI,yCAAoC,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,MAChG;AACA,iBAAW,KAAK,WAAW;AACzB,cAAM,SAAS,SAAS,EAAE,UAAU;AACpC,YAAI,OAAO,WAAW,EAAG,OAAM,KAAK,YAAY,EAAE,IAAI,8CAA8C;AAAA,MACtG;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,UAAU,GAAG;AAC3B,YAAM,SAA6B;AACnC,YAAM,UAAU,CAAC,MAAiE;AAChF,aAAK,EAAE,WAAW,eAAe,CAAC,GAAG,SAAS,MAAM,EAAG,QAAO;AAC9D,cAAM,qBAAqB,6BAA6B,EAAE,UAAU,EAAE,cAAc;AAAA,UAAK,CAAC,OACvF,EAAE,6BAA6B,CAAC,GAAG,SAAS,MAAM;AAAA,QACrD;AACA,eAAO,qBAAqB,iBAAiB;AAAA,MAC/C;AACA,YAAM,SAAS,IAAI,IAAI,SAAS,IAAI,OAAO,EAAE,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC;AACxE,YAAM,QAAkB,CAAC;AACzB,UAAI,OAAO,OAAO,EAAG,OAAM,KAAK,4BAA4B,MAAM,oBAAoB,CAAC,GAAG,MAAM,EAAE,KAAK,KAAK,CAAC,EAAE;AAG/G,UAAI,UAAU,QAAQ;AACpB,cAAM,YAAY,IAAI,IAAI,CAAC,GAAG,UAAU,GAAG,SAAS,EAAE,IAAI,OAAO,EAAE,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC;AAC9F,YAAI,UAAU,QAAQ,EAAG,OAAM,KAAK,mFAAmF;AAAA,MACzH;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,UAAU,OAAO,GAAG;AACxB,YAAM,EAAE,OAAO,IAAI;AACnB,UAAI,CAAC,OAAQ,QAAO,QAAQ,oEAAoE;AAChG,YAAM,QAAkB,CAAC;AACzB,iBAAW,KAAK,UAAU;AACxB,cAAM,SAAS,OAAO,UAAU,EAAE,UAAU,IAAI,OAAO,EAAE,WAAW,SAAS,CAAC;AAE9E,YAAI,EAAE,kBAAkB,QAAQ,OAAQ,OAA2C,QAAQ,YAAY;AACrG,gBAAM,KAAK,GAAG,EAAE,IAAI,6CAA6C;AAAA,QACnE;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,IACV,IAAI,EAAE,OAAO,GAAG;AACd,YAAM,EAAE,mBAAmB,cAAc,IAAI;AAC7C,UAAI,CAAC,qBAAqB,CAAC,cAAe,QAAO,QAAQ,2DAA2D;AACpH,YAAM,QAAkB,CAAC;AACzB,UAAI;AACF,0BAAkB,qCAAqC,aAAa;AACpE,cAAM,KAAK,+EAA0E;AAAA,MACvF,QAAQ;AAAA,MAER;AAEA,YAAM,QAAQ,CAAC,GAAG,aAAa,EAAE,CAAC;AAClC,UAAI,OAAO;AACT,YAAI;AACF,4BAAkB,OAAO,aAAa;AAAA,QACxC,SAAS,KAAK;AACZ,gBAAM,KAAK,+BAA+B,KAAK,MAAM,OAAO,GAAG,CAAC,EAAE;AAAA,QACpE;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM;AAAA,IACzD;AAAA,EACF;AACF;AAEA,SAAS,QAAQ,QAA8B;AAC7C,SAAO,EAAE,QAAQ,WAAW,OAAO,CAAC,MAAM,EAAE;AAC9C;AAqBA,IAAM,eAAe,MACnB,IAAI,aAAa;AAAA,EACf,WAAW;AAAA,IACT,UAAU;AAAA,MACR,EAAE,IAAI,KAAK,OAAO,YAAY;AAAA,MAC9B,EAAE,IAAI,KAAK,OAAO,gBAAgB;AAAA,IACpC;AAAA,IACA,OAAO,CAAC,aAAa,aAAa,WAAW;AAAA,EAC/C;AAAA,EACA,QAAQ;AAAA,IACN,UAAU,CAAC,EAAE,IAAI,KAAK,OAAO,iBAAiB,CAAC;AAAA,IAC/C,OAAO,CAAC,aAAa;AAAA,EACvB;AACF,CAAC;AAEH,eAAsB,eAAe,OAAqD;AACxF,QAAM,OAAO,MAAM,QAAQ,aAAa;AACxC,QAAM,SAAS,MAAM,UAAU,CAAC;AAChC,QAAM,WAA2B,CAAC;AAElC,aAAW,SAAS,QAAQ;AAC1B,UAAM,YAAY,MAAM,UAAU,OAAO,CAAC,MAAM,EAAE,aAAa,MAAM,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO;AAC7F,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,MAAM,IAAI,EAAE,UAAU,MAAM,UAAU,WAAW,QAAQ,KAAK,CAAC;AAAA,IACjF,SAAS,KAAK;AACZ,gBAAU,EAAE,QAAQ,QAAQ,OAAO,CAAC,gBAAgB,OAAO,GAAG,CAAC,EAAE,EAAE;AAAA,IACrE;AACA,aAAS,KAAK;AAAA,MACZ,IAAI,MAAM;AAAA,MACV,OAAO,MAAM;AAAA,MACb,aAAa,MAAM;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,OAAO,QAAQ;AAAA,IACjB,CAAC;AAAA,EACH;AAEA,QAAM,mBAAmB,SAAS,OAAO,CAAC,MAAM,EAAE,gBAAgB,cAAc,EAAE,WAAW,MAAM,EAAE;AACrG,QAAM,gBAAgB,SAAS,OAAO,CAAC,MAAM,EAAE,gBAAgB,YAAY,EAAE,WAAW,SAAS,EAAE;AACnG,QAAM,oBAAoB,SAAS,OAAO,CAAC,MAAM,EAAE,gBAAgB,YAAY,EAAE,WAAW,MAAM,EAAE;AAIpG,QAAM,eAAe;AAErB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,qBAAqB,KAAK,sBAAsB;AAAA,EACtD;AACF;AAEA,IAAM,OAAoC,EAAE,MAAM,aAAM,MAAM,aAAM,SAAS,YAAK;AAG3E,SAAS,aAAa,QAA2B,MAAqC;AAC3F,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,0DAAkD;AAC7D,QAAM,KAAK,kRAAiD;AAC5D,aAAW,KAAK,OAAO,UAAU;AAC/B,UAAM,MAAM,EAAE,gBAAgB,WAAW,cAAc;AACvD,UAAM,KAAK,KAAK,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,GAAG,EAAE;AACpE,eAAW,KAAK,EAAE,MAAO,OAAM,KAAK,kBAAa,CAAC,EAAE;AAAA,EACtD;AACA,QAAM,KAAK,kRAAiD;AAC5D,QAAM;AAAA,IACJ,wBAAwB,OAAO,gBAAgB,sBAC1B,OAAO,aAAa,0BAA0B,OAAO,iBAAiB;AAAA,EAC7F;AACA,QAAM,cAAc,MAAM,UAAU,UAAU,OAAO,gBAAgB;AACrE,MAAI,OAAO,MAAM,CAAC,YAAY;AAC5B,UAAM,KAAK,+FAAmF;AAAA,EAChG,OAAO;AACL,UAAM,KAAK,gDAAoC;AAAA,EACjD;AACA,QAAM,KAAK,EAAE;AACb,SAAO,MAAM,KAAK,IAAI;AACxB;;;AC7zBA,6BAA6B;AAE7B,IAAM,YAAY,CAAC,QAAmC,EAAE,MAAM,UAAU,IAAI,YAAY,UAAU;AAClG,IAAM,SAAS,CAAC,MAAwB,OAAO,MAAM,WAAW,IAAI;AAIpE,IAAM,YAAgC;AAAA,EACpC,MAAM;AAAA,EACN,WAAW,UAAU,mBAAmB;AAAA,EACxC,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,0BAA0B,cAAc,qBAAqB,qBAAqB;AAAA,IAC/F,UAAU;AAAA,MACR,cAAc;AAAA,QACZ,KAAK;AAAA,QACL,aAAa;AAAA,QACb,0BAA0B,CAAC;AAAA,QAC3B,OAAO;AAAA,QACP,WAAW,CAAC,mBAAmB;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,IACA,eAAe,CAAC,mBAAmB,EAAE,KAAK,cAAc,MAAM,SAAS,aAAa,mBAAmB,CAAC,CAAC;AAAA,IACzG,sBAAsB;AAAA,MACpB,yBAAyB,EAAE,KAAK,cAAc,aAAa,uBAAuB,0BAA0B,CAAC,EAAE,CAAC;AAAA,IAClH;AAAA,EACF,CAAC;AAAA,EACD,SAAS,MAAgB;AACvB,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,yBAAyB;AAAA,MAC/B,MAAM,MAAM,SAAS,KAAK;AACxB,cAAM,OAAO,MAAM,KAAK,MAAM,MAAM,OAAO,QAAQ,QAAQ,CAAC,GAAG,EAAE,OAAO,QAAQ,MAAM,CAAC;AACvF,eAAO,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,OAAO,aAAa,IAAI,UAAU,GAAG,EAAE;AAAA,MACtF;AAAA,IACF,CAA4B;AAC5B,QAAI,IAAI,uBAAuB;AAAA,MAC7B,MAAM,WAAW;AACf,eAAO,EAAE,UAAU,CAAC,EAAE,WAAW,mBAAmB,aAAa,YAAY,CAAC,EAAE;AAAA,MAClF;AAAA,MACA,MAAM,OAAO,SAAS,KAAK;AACzB,cAAM,WAAW,MAAM,KAAK,QAAQ,SAAS;AAC7C,cAAM,UAAU,MAAM,KAAK,QAAQ,OAAO,QAAQ,WAAW,QAAQ,IAAI;AACzE,eAAO,EAAE,IAAI,MAAM,MAAM,EAAE,aAAa,SAAS,aAAa,aAAa,IAAI,UAAU,IAAI,QAAQ,EAAE;AAAA,MACzG;AAAA,IACF,CAAkC;AAElC,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAIA,IAAM,YAAgC;AAAA,EACpC,MAAM;AAAA,EACN,WAAW,UAAU,mBAAmB;AAAA,EACxC,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,0BAA0B,YAAY;AAAA,IACnD,UAAU;AAAA,MACR,cAAc;AAAA,QACZ,KAAK;AAAA,QACL,aAAa;AAAA,QACb,0BAA0B,CAAC;AAAA,QAC3B,OAAO;AAAA,QACP,WAAW,CAAC,mBAAmB;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,IACA,eAAe,CAAC,mBAAmB,EAAE,KAAK,cAAc,MAAM,UAAU,aAAa,oBAAoB,CAAC,CAAC;AAAA,IAC3G,mBAAmB;AAAA,MACjB,uBAAuB;AAAA,QACrB,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,0BAA0B,CAAC;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAAA,EACD,SAAS,MAAgB;AACvB,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,0BAA0B;AAAA,MAChC,MAAM,MAAM,SAAS,KAAK;AACxB,cAAM,OAAO,MAAM,KAAK,MAAM,MAAM,OAAO,QAAQ,QAAQ,CAAC,GAAG,EAAE,OAAO,QAAQ,MAAM,CAAC;AACvF,cAAM,QAAQ,MAAM,KAAK,MAAM,MAAM;AACrC,eAAO,CAAC,EAAE,WAAW,MAAM,OAAO,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,aAAa,IAAI,UAAU,GAAG,CAAC;AAAA,MAChG;AAAA,IACF,CAA4B;AAC5B,QAAI,IAAI,yCAAyC;AAAA,MAC/C,MAAM,OAAO,SAAS,KAAK;AACzB,cAAM,OAAO,MAAM,KAAK,MAAM,MAAM,OAAO,QAAQ,MAAM,CAAC,GAAG,CAAC,CAAC;AAC/D,eAAO,EAAE,IAAI,MAAM,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,GAAG,aAAa,IAAI,UAAU,GAAG,EAAE;AAAA,MAC3G;AAAA,IACF,CAAyB;AAEzB,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAEO,IAAM,uBAAsD,CAAC,WAAW,SAAS;AAIxF,IAAM,gBAAgB,MAA0C,oBAAI,IAAI;AAIxE,IAAM,cAAkC;AAAA,EACtC,MAAM;AAAA,EACN,WAAW,UAAU,qBAAqB;AAAA,EAC1C,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,0BAA0B,YAAY;AAAA,IACnD,eAAe,CAAC,mBAAmB,EAAE,KAAK,gBAAgB,MAAM,SAAS,aAAa,WAAW,CAAC,CAAC;AAAA,EACrG,CAAC;AAAA,EACD,WAAW;AACT,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,2BAA2B;AAAA,MACjC,MAAM,MAAM,UAAU,KAAK;AACzB,eAAO,CAAC,EAAE,IAAI,QAAQ,OAAO,qBAAqB,aAAa,IAAI,UAAU,GAAG,CAAC;AAAA,MACnF;AAAA,IACF,CAA4B;AAC5B,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAGA,IAAM,aAAiC;AAAA,EACrC,MAAM;AAAA,EACN,WAAW,UAAU,oBAAoB;AAAA,EACzC,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,0BAA0B,YAAY;AAAA,IACnD,eAAe,CAAC,mBAAmB,EAAE,KAAK,eAAe,MAAM,SAAS,aAAa,WAAW,CAAC,CAAC;AAAA,EACpG,CAAC;AAAA,EACD,WAAW;AACT,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,0BAA0B;AAAA,MAChC,MAAM,MAAM,UAAU,KAAK;AACzB,eAAO,CAAC,EAAE,IAAI,SAAS,OAAO,YAAY,aAAa,IAAI,UAAU,GAAG,CAAC;AAAA,MAC3E;AAAA,IACF,CAA4B;AAC5B,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAGA,IAAM,gBAAoC;AAAA,EACxC,MAAM;AAAA,EACN,WAAW,UAAU,uBAAuB;AAAA,EAC5C,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,CAAC;AAAA,IACd,eAAe,CAAC,mBAAmB,EAAE,KAAK,kBAAkB,MAAM,SAAS,aAAa,WAAW,CAAC,CAAC;AAAA,EACvG,CAAC;AAAA,EACD,SAAS,MAAgB;AACvB,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,6BAA6B;AAAA,MACnC,MAAM,MAAM,UAAU,KAAK;AACzB,cAAM,OAAO,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC;AAC1C,eAAO,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,aAAa,IAAI,UAAU,GAAG,EAAE;AAAA,MAC5E;AAAA,IACF,CAA4B;AAC5B,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAGA,IAAM,eAAmC;AAAA,EACvC,MAAM;AAAA,EACN,WAAW,UAAU,sBAAsB;AAAA,EAC3C,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,0BAA0B,cAAc,qBAAqB;AAAA,IAC1E,eAAe,CAAC,mBAAmB,EAAE,KAAK,iBAAiB,MAAM,SAAS,aAAa,WAAW,CAAC,CAAC;AAAA,EACtG,CAAC;AAAA,EACD,SAAS,MAAgB;AACvB,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,4BAA4B;AAAA,MAClC,MAAM,MAAM,UAAU,KAAK;AACzB,cAAM,OAAO,MAAM,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC;AAC1C,eAAO,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,aAAa,IAAI,UAAU,GAAG,EAAE;AAAA,MAC5E;AAAA,IACF,CAA4B;AAC5B,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAGA,IAAM,kBAAsC;AAAA,EAC1C,MAAM;AAAA,EACN,WAAW,UAAU,yBAAyB;AAAA,EAC9C,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,eAAe,CAAC,mBAAmB,EAAE,KAAK,oBAAoB,MAAM,QAAQ,aAAa,UAAU,CAAC,CAAC;AAAA,EACvG,CAAC;AAAA,EACD,UAAU;AAAA,EACV,eAAe,CAAC,MAAM,sBAAsB;AAC9C;AAGA,IAAM,QAA4B;AAAA,EAChC,MAAM;AAAA,EACN,WAAW,UAAU,eAAe;AAAA,EACpC,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,UAAU,CAAC,cAAc,EAAE,gBAAgB,wBAAwB,aAAa,OAAO,0BAA0B,CAAC,EAAE,CAAC,CAAC;AAAA,EACxH,CAAC;AAAA,EACD,UAAU;AAAA,EACV,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAGA,IAAM,WAA+B;AAAA,EACnC,MAAM;AAAA,EACN,WAAW,UAAU,kBAAkB;AAAA,EACvC,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,UAAU;AAAA,MACR,cAAc,EAAE,KAAK,aAAa,aAAa,QAAQ,0BAA0B,CAAC,GAAG,OAAO,WAAW,CAAC;AAAA,IAC1G;AAAA,EACF,CAAC;AAAA,EACD,WAAW;AACT,UAAM,MAAM,oBAAI,IAA2B;AAC3C,QAAI,IAAI,qBAAqB;AAAA,MAC3B,MAAM,QAAQ;AACZ,eAAO,CAAC;AAAA,MACV;AAAA,IACF,CAA4B;AAC5B,WAAO;AAAA,EACT;AAAA,EACA,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAKA,IAAM,wBAA4C;AAAA,EAChD,MAAM;AAAA,EACN,WAAW,UAAU,mBAAmB;AAAA,EACxC,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,CAAC;AAAA;AAAA,IACd,eAAe;AAAA,MACb,mBAAmB;AAAA,QACjB,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,QACb,2BAA2B,CAAC,YAAY;AAAA;AAAA,MAC1C,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAAA,EACD,UAAU;AAAA,EACV,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAIA,IAAM,yBAA6C;AAAA,EACjD,MAAM;AAAA,EACN,WAAW,UAAU,2BAA2B;AAAA,EAChD,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,aAAa,0BAA0B,8BAA8B;AAAA,IACrE,sBAAsB;AAAA,MACpB,yBAAyB,EAAE,KAAK,aAAa,aAAa,aAAa,0BAA0B,CAAC,EAAE,CAAC;AAAA,IACvG;AAAA,EACF,CAAC;AAAA,EACD,UAAU;AAAA,EACV,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAEA,IAAM,4BAAgD;AAAA,EACpD,MAAM;AAAA,EACN,WAAW,UAAU,+BAA+B;AAAA,EACpD,YAAY,gBAAgB;AAAA,IAC1B,UAAU;AAAA,IACV,aAAa;AAAA,IACb,sBAAsB;AAAA,MACpB,yBAAyB;AAAA,QACvB,KAAK;AAAA,QACL,aAAa;AAAA,QACb,0BAA0B,CAAC;AAAA,QAC3B,2BAA2B,CAAC,8BAA8B;AAAA;AAAA,MAC5D,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAAA,EACD,UAAU;AAAA,EACV,eAAe,CAAC,QAAQ,IAAI,UAAU;AACxC;AAEO,IAAM,oBAAgD;AAAA,EAC3D,EAAE,UAAU,MAAM,SAAS,YAAY;AAAA,EACvC,EAAE,UAAU,MAAM,SAAS,WAAW;AAAA,EACtC,EAAE,UAAU,MAAM,SAAS,cAAc;AAAA,EACzC,EAAE,UAAU,MAAM,SAAS,aAAa;AAAA,EACxC,EAAE,UAAU,MAAM,SAAS,gBAAgB;AAAA,EAC3C,EAAE,UAAU,MAAM,SAAS,MAAM;AAAA,EACjC,EAAE,UAAU,MAAM,SAAS,SAAS;AAAA,EACpC,EAAE,UAAU,OAAO,SAAS,sBAAsB;AAAA,EAClD,EAAE,UAAU,OAAO,SAAS,uBAAuB;AAAA,EACnD,EAAE,UAAU,OAAO,SAAS,0BAA0B;AACxD;","names":["principal","requiresKernelPermissions","requiresHostCapabilities"]}

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@kybernesis/kyberagent-extension-sdk",
+  "version": "0.1.0-alpha",
+  "description": "KyberAgent host↔extension SDK — typed define* builders and conformance testing kit for authoring KyberAgent extensions.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "effect": "^3.11.0"
+  }
+}